[Script Info] Title: [Events] Format: Layer, Start, End, Style, Name, MarginL, MarginR, MarginV, Effect, Text Dialogue: 0,0:00:12.14,0:00:13.14,Default,,0000,0000,0000,,[Music] Dialogue: 0,0:00:13.27,0:00:16.57,Default,,0000,0000,0000,,MC: so have you ever called IT only to be\Ntold Dialogue: 0,0:00:16.57,0:00:18.57,Default,,0000,0000,0000,,have you tried turning it off and on again? Dialogue: 0,0:00:23.20,0:00:28.46,Default,,0000,0000,0000,,Today we will be talking about\Npilots usually pilots are called to pilot Dialogue: 0,0:00:28.46,0:00:34.64,Default,,0000,0000,0000,,in command and we expect a pilot to be\Njust that in command but today's pilots Dialogue: 0,0:00:34.64,0:00:39.83,Default,,0000,0000,0000,,are turning more and more into computer\Noperators and have less and less actual Dialogue: 0,0:00:39.83,0:00:47.86,Default,,0000,0000,0000,,hands-on flying ability so now imagine you\Nare the pilot flying a gigantic computer Dialogue: 0,0:00:47.86,0:00:55.07,Default,,0000,0000,0000,,in 30,000 feet height with 200 souls\Nbehind you only to be told by IT have you Dialogue: 0,0:00:55.07,0:01:03.13,Default,,0000,0000,0000,,tried turning it off and on again so I\Nwould like to welcome Bernd Sieker. who is Dialogue: 0,0:01:03.13,0:01:07.95,Default,,0000,0000,0000,,a systems engineer and an aviation\Naccident analyst he specialized in reverse Dialogue: 0,0:01:07.95,0:01:12.95,Default,,0000,0000,0000,,engineering and he's developing formal\Nmethods to development of safety critical Dialogue: 0,0:01:12.95,0:01:18.97,Default,,0000,0000,0000,,systems and he will enlighten us about\Nproblems in aviation automation because Dialogue: 0,0:01:18.97,0:01:24.72,Default,,0000,0000,0000,,apparently every pilot has uttered the\Nwords what's it doing now Dialogue: 0,0:01:24.72,0:01:32.55,Default,,0000,0000,0000,,[Applause]\NBS: yes thank you thank you very much yes Dialogue: 0,0:01:32.55,0:01:37.96,Default,,0000,0000,0000,,but first I'd like to learn a bit about\Nthe audience so how many of you here in Dialogue: 0,0:01:37.96,0:01:46.42,Default,,0000,0000,0000,,the hall today are pilots Oh quite a few\Nso commercial pilots? far fewer. ATP Dialogue: 0,0:01:46.42,0:01:54.43,Default,,0000,0000,0000,,anyone? yeah there's one I heard one but I\Ncan't see. okay so some of you will know Dialogue: 0,0:01:54.43,0:02:01.86,Default,,0000,0000,0000,,about some of the stuff I hope there's a\Nbit new stuff for everyone let's get right Dialogue: 0,0:02:01.86,0:02:09.49,Default,,0000,0000,0000,,into it what the announcer said was a bit\Nof nice folklore it's not completely true Dialogue: 0,0:02:09.49,0:02:15.01,Default,,0000,0000,0000,,but there's a little bit truth to it what\NI'm going to talk about is automation in Dialogue: 0,0:02:15.01,0:02:19.01,Default,,0000,0000,0000,,the aircraft and the idea is often as he\Nsaid that it's just a computer and the Dialogue: 0,0:02:19.01,0:02:22.65,Default,,0000,0000,0000,,pilot doesn't have to do anything that's\None saying that in modern airplanes there Dialogue: 0,0:02:22.65,0:02:29.87,Default,,0000,0000,0000,,will only be one pilot and a dog and the\Npilot is there to watch what the the Dialogue: 0,0:02:29.87,0:02:33.29,Default,,0000,0000,0000,,pilots there to feed the dog and the dog\Nis there to bite the pilot if he touches Dialogue: 0,0:02:33.29,0:02:42.10,Default,,0000,0000,0000,,anything so that's not quite yet how it is\NI talk a very little bit about the Dialogue: 0,0:02:42.10,0:02:48.86,Default,,0000,0000,0000,,analysis method that we use to analyze\Naccidents not only in aviation but mostly Dialogue: 0,0:02:48.86,0:02:53.10,Default,,0000,0000,0000,,and then I'll tell you a short tale of two\Nthrottles or two thrust levers as they are Dialogue: 0,0:02:53.10,0:02:58.95,Default,,0000,0000,0000,,sometimes called and also talk about human\Npilots how they cope with failures or Dialogue: 0,0:02:58.95,0:03:04.24,Default,,0000,0000,0000,,don't as the case may be and I haven't\Nseen a lot of other talks here about self- Dialogue: 0,0:03:04.24,0:03:08.26,Default,,0000,0000,0000,,driving cars although they are now\Nbecoming a very big thing so I'll touch Dialogue: 0,0:03:08.26,0:03:14.22,Default,,0000,0000,0000,,that briefly and have a tentative\Nconclusion. I can't see very fine to the Dialogue: 0,0:03:14.22,0:03:22.94,Default,,0000,0000,0000,,future so I'm not sure if I'm right about\Nthat. So what is automation in airplanes? Dialogue: 0,0:03:22.94,0:03:27.37,Default,,0000,0000,0000,,the most obvious thing is that automated\Nflight controls on every airliner and on Dialogue: 0,0:03:27.37,0:03:32.81,Default,,0000,0000,0000,,many small airplanes these days. there\Nused to be a requirement for a simple Dialogue: 0,0:03:32.81,0:03:36.74,Default,,0000,0000,0000,,autopilot even on small private single-\Nengine airplanes if you want to fly under Dialogue: 0,0:03:36.74,0:03:43.18,Default,,0000,0000,0000,,instrument flight rules. That has been\Nrelaxed somewhat now but many small planes Dialogue: 0,0:03:43.18,0:03:48.66,Default,,0000,0000,0000,,still have them. so there are three levels\Nof fat controls there the first one is Dialogue: 0,0:03:48.66,0:03:54.67,Default,,0000,0000,0000,,manual flight where the pilot moves flight\Ncontrols and the airplane does what it's Dialogue: 0,0:03:54.67,0:03:58.40,Default,,0000,0000,0000,,told then there's the simple\Nautopilot where the pilot just Dialogue: 0,0:03:58.40,0:04:04.30,Default,,0000,0000,0000,,sets airspeed altitude climb rate stuff\Nlike that and there are managed modes now Dialogue: 0,0:04:04.30,0:04:07.64,Default,,0000,0000,0000,,where there's a more sophisticated\Ncomputer which has knowledge about the Dialogue: 0,0:04:07.64,0:04:12.66,Default,,0000,0000,0000,,whole flight with waypoints and altitudes\Nand there are other automated systems not Dialogue: 0,0:04:12.66,0:04:18.75,Default,,0000,0000,0000,,only the flight controls spoilers on the\Nground have to extend to help slowing down Dialogue: 0,0:04:18.75,0:04:25.08,Default,,0000,0000,0000,,the aircraft the high-lift devices are\Nautomated radios maybe Auto-tuning there's Dialogue: 0,0:04:25.08,0:04:30.04,Default,,0000,0000,0000,,the computer that controls the engines\Nfull authority digital engine control. Dialogue: 0,0:04:30.04,0:04:33.84,Default,,0000,0000,0000,,There are things like cabin pressurization\Nand many other small subsystems are Dialogue: 0,0:04:33.84,0:04:42.16,Default,,0000,0000,0000,,automated as they are in cars these days.\NSo what is automation not? It's not yet Dialogue: 0,0:04:42.16,0:04:49.06,Default,,0000,0000,0000,,except for very few specialized drones a\Nself flying aircraft the pilot in command Dialogue: 0,0:04:49.06,0:04:53.01,Default,,0000,0000,0000,,still is in command at all times you can\Nturn off the automation you can have to Dialogue: 0,0:04:53.01,0:04:58.22,Default,,0000,0000,0000,,fly the aircraft at any time if you wants\Nto and barring any serious errors which Dialogue: 0,0:04:58.22,0:05:05.49,Default,,0000,0000,0000,,are extremely rare in commercial aircraft\Nthe airplane does what it's told. the Dialogue: 0,0:05:05.49,0:05:09.78,Default,,0000,0000,0000,,pilots the the autopilot really doesn't\Nhave any decision capabilities except at Dialogue: 0,0:05:09.78,0:05:15.19,Default,,0000,0000,0000,,the very lowest level deciding on a bank\Nangle to make the right turn and things Dialogue: 0,0:05:15.19,0:05:22.01,Default,,0000,0000,0000,,like that it is also not a panacea for any\Nerrors that the pilot can make now you can Dialogue: 0,0:05:22.01,0:05:25.80,Default,,0000,0000,0000,,still fly a highly computerized modern\Naircraft into the side of the mountain if Dialogue: 0,0:05:25.80,0:05:32.49,Default,,0000,0000,0000,,you want to. so some military aircraft\Nactually have systems that will prevent Dialogue: 0,0:05:32.49,0:05:36.08,Default,,0000,0000,0000,,you from flying into a mountain if they're\Nactive or if you have passed out but Dialogue: 0,0:05:36.08,0:05:40.78,Default,,0000,0000,0000,,airliners don't at the time and of course\Nthe pilot in command still bears the Dialogue: 0,0:05:40.78,0:05:46.65,Default,,0000,0000,0000,,ultimate responsibility for the safe\Nconduct of the flight. so as I said Dialogue: 0,0:05:46.65,0:05:49.73,Default,,0000,0000,0000,,briefly manual flying is just stick and\Nrudder you move the stick and you move Dialogue: 0,0:05:49.73,0:05:55.98,Default,,0000,0000,0000,,your rudder pedals and the airplane moves\Nthe control surfaces mechanically on small Dialogue: 0,0:05:55.98,0:06:00.69,Default,,0000,0000,0000,,airplanes hydrolically assisted or even\Ncomputer-assisted on some airliners on Dialogue: 0,0:06:00.69,0:06:05.92,Default,,0000,0000,0000,,most modern airliners called fly-by-wire\Nyou may have heard about that then the Dialogue: 0,0:06:05.92,0:06:10.56,Default,,0000,0000,0000,,simple autopilot modes where you\Ndirectly select the heading and the Dialogue: 0,0:06:10.56,0:06:15.48,Default,,0000,0000,0000,,airplane flies in that heading and managed\Nmodes as I said before where you have a Dialogue: 0,0:06:15.48,0:06:21.71,Default,,0000,0000,0000,,sophisticated flight management system\Nwhich then in turn sets headings and climb Dialogue: 0,0:06:21.71,0:06:26.81,Default,,0000,0000,0000,,rates and things like that on the\Nautopilot proper. they are not super Dialogue: 0,0:06:26.81,0:06:33.88,Default,,0000,0000,0000,,reliable they can be thrown off by many\Nthings and mostly they they turn off when Dialogue: 0,0:06:33.88,0:06:38.93,Default,,0000,0000,0000,,there's any small error in any of the\Nsmall subsystems, any of the various input Dialogue: 0,0:06:38.93,0:06:44.01,Default,,0000,0000,0000,,values that you get air speed altitude\Nengine power anything if any of those have Dialogue: 0,0:06:44.01,0:06:49.79,Default,,0000,0000,0000,,invalid readings it'll turn off and the\Npilots have to assume command in that Dialogue: 0,0:06:49.79,0:06:56.80,Default,,0000,0000,0000,,case. they cannot handle basically\Nanything unexpected most air sensors are Dialogue: 0,0:06:56.80,0:07:01.80,Default,,0000,0000,0000,,there then threefold so if only one of\Nthem disagrees the other two are usually Dialogue: 0,0:07:01.80,0:07:07.52,Default,,0000,0000,0000,,taken as valid but if they all three\Ndisagree then the system just says I don't Dialogue: 0,0:07:07.52,0:07:13.66,Default,,0000,0000,0000,,know what's true anymore what speed is and\Nall the automatics drop out and most of Dialogue: 0,0:07:13.66,0:07:17.43,Default,,0000,0000,0000,,the computer assisted manual flying also\Nis turned off in that case. Dialogue: 0,0:07:20.14,0:07:21.80,Default,,0000,0000,0000,,so this is very briefly the method Dialogue: 0,0:07:21.80,0:07:25.39,Default,,0000,0000,0000,,that we have developed at \Nthe University of Bielefeld Dialogue: 0,0:07:25.39,0:07:30.90,Default,,0000,0000,0000,,and the professor lepkin for analyzing\Naccidents called why because analysis it Dialogue: 0,0:07:30.90,0:07:36.08,Default,,0000,0000,0000,,uses a formal notion of causality called\Nthe counterfactual test and then you can Dialogue: 0,0:07:36.08,0:07:42.94,Default,,0000,0000,0000,,make a very nice graph for accidents\Nthey're usually bigger than that but it's Dialogue: 0,0:07:42.94,0:07:47.44,Default,,0000,0000,0000,,more or less objective criterion for\Ncausality and then different people with Dialogue: 0,0:07:47.44,0:07:52.15,Default,,0000,0000,0000,,some experience in the domain make why\Nbecause graphs of an accident they usually Dialogue: 0,0:07:52.15,0:07:53.37,Default,,0000,0000,0000,,are very similar to each other Dialogue: 0,0:07:56.63,0:08:00.48,Default,,0000,0000,0000,,so there's a lot of automation \Non modern airplanes Dialogue: 0,0:08:01.38,0:08:08.99,Default,,0000,0000,0000,,and it's quite hard to get it right and\None of the reasons is that unlike for many Dialogue: 0,0:08:08.99,0:08:15.16,Default,,0000,0000,0000,,situations in cars and rail vehicles there\Nis no default safe state, you can't just Dialogue: 0,0:08:15.16,0:08:19.91,Default,,0000,0000,0000,,turn everything off and stop by the\Nroadside so we always have to decide the Dialogue: 0,0:08:19.91,0:08:26.60,Default,,0000,0000,0000,,engineers always have to plan for many\Neventualities what can happen in the air Dialogue: 0,0:08:26.60,0:08:33.21,Default,,0000,0000,0000,,and decide what given a certain set of\Ncircumstances is the safest state for the Dialogue: 0,0:08:33.21,0:08:37.68,Default,,0000,0000,0000,,airplane to be in and that is not always\Nunambiguous and it's a very hard decision Dialogue: 0,0:08:37.68,0:08:42.19,Default,,0000,0000,0000,,tomake and sometimes \Nthey get it wrong and Dialogue: 0,0:08:42.19,0:08:48.93,Default,,0000,0000,0000,,sometimes you just get into that situation\Nwhere in most cases the set of values the Dialogue: 0,0:08:48.93,0:08:56.02,Default,,0000,0000,0000,,set of measured values that the system\Ngets when most circumstance is one set of Dialogue: 0,0:08:56.02,0:08:59.96,Default,,0000,0000,0000,,decisions is the correct one and you get\Ninto that situation where the computers Dialogue: 0,0:08:59.96,0:09:05.07,Default,,0000,0000,0000,,get the same inputs and that decision is\Nthe wrong one and that may still lead to Dialogue: 0,0:09:05.07,0:09:15.17,Default,,0000,0000,0000,,an accident. those are very few and very\Nrare but these these things can happen. so Dialogue: 0,0:09:15.17,0:09:19.00,Default,,0000,0000,0000,,a few of the decisions that the engineers\Nhave to take when designing the automation Dialogue: 0,0:09:19.00,0:09:25.28,Default,,0000,0000,0000,,in airplanes is what to do if things fail\Nif certain individual things fail if a Dialogue: 0,0:09:25.28,0:09:32.90,Default,,0000,0000,0000,,combination of things fail little motors\Nlittle engines sensors fail some actuators Dialogue: 0,0:09:32.90,0:09:38.39,Default,,0000,0000,0000,,fail a hydraulic system fails anything\Nlike that what you do in that case with Dialogue: 0,0:09:38.39,0:09:45.19,Default,,0000,0000,0000,,the remaining systems and what to tell the\Npilots? well naively you might assume the Dialogue: 0,0:09:45.19,0:09:49.18,Default,,0000,0000,0000,,pilot wants to know about everything that\Nis broken every little valve every little Dialogue: 0,0:09:49.18,0:09:56.37,Default,,0000,0000,0000,,system that is broken on the airplane but\Nif a lot goes wrong at the same time then Dialogue: 0,0:09:56.37,0:10:01.17,Default,,0000,0000,0000,,the decision has to be taken which of\Nthese things that have gone wrong are the Dialogue: 0,0:10:01.17,0:10:06.95,Default,,0000,0000,0000,,most important for the flight crew to know\Nand that's not trivial at all and it can Dialogue: 0,0:10:06.95,0:10:15.22,Default,,0000,0000,0000,,very easily lead to to sensory saturation\Nof the pilots so they don't know what is Dialogue: 0,0:10:15.22,0:10:20.50,Default,,0000,0000,0000,,what anymore because from all sides alarms\Nare blaring there are lots and lots of Dialogue: 0,0:10:20.50,0:10:28.13,Default,,0000,0000,0000,,displays that they have to watch and so\Ncertain error messages are suppressed in Dialogue: 0,0:10:28.13,0:10:33.23,Default,,0000,0000,0000,,certain states of flight certain stages of\Nthe flight so as not to overwhelm the Dialogue: 0,0:10:33.23,0:10:38.30,Default,,0000,0000,0000,,pilot. and some things that may be\Nessential to have on the ground some Dialogue: 0,0:10:38.30,0:10:43.51,Default,,0000,0000,0000,,functions for example the wing spoilers\Nthose are the big the big flaps on the top Dialogue: 0,0:10:43.51,0:10:49.49,Default,,0000,0000,0000,,of the wings that come up after touchdown\Nare important to have on landing to dump Dialogue: 0,0:10:49.49,0:10:54.57,Default,,0000,0000,0000,,the lift so the airplane doesn't jump up\Nagain. because it is a touchdown still at Dialogue: 0,0:10:54.57,0:10:58.41,Default,,0000,0000,0000,,the speed at which it could fly at least\Nfor airliners, for small airplanes it's a Dialogue: 0,0:10:58.41,0:11:03.04,Default,,0000,0000,0000,,bit different but airliners are safely\Nabove the very lowest Dialogue: 0,0:11:03.04,0:11:07.16,Default,,0000,0000,0000,,speed they can go when they touchdown so\Nthey need to have some means to make sure Dialogue: 0,0:11:07.16,0:11:11.96,Default,,0000,0000,0000,,they don't jump up again they still do\Nsometimes but not very often but the Dialogue: 0,0:11:11.96,0:11:15.99,Default,,0000,0000,0000,,spoilers destroy most of the lift so\Ndeploying them in the air close to the Dialogue: 0,0:11:15.99,0:11:24.34,Default,,0000,0000,0000,,ground is extremely dangerous so the\Ncomputer has to be absolutely certain so Dialogue: 0,0:11:24.34,0:11:28.96,Default,,0000,0000,0000,,to speak to know that the aircraft is on\Nthe ground when it gives the command to Dialogue: 0,0:11:28.96,0:11:34.77,Default,,0000,0000,0000,,deploy the ground spoilers if it does that\Na few seconds too early when the airplane Dialogue: 0,0:11:34.77,0:11:40.83,Default,,0000,0000,0000,,is still a hundred meters up above the\Nground that will likely be a fatal accident. Dialogue: 0,0:11:47.59,0:11:51.76,Default,,0000,0000,0000,,so in most at least in most jet\Nairliners not in all propeller-driven but Dialogue: 0,0:11:51.76,0:11:56.71,Default,,0000,0000,0000,,in all almost all jet airliners there's an\Nautomatic thrust management so the Dialogue: 0,0:11:56.71,0:12:01.42,Default,,0000,0000,0000,,computer does not only control where the\Nnose of the airplane points but also how Dialogue: 0,0:12:01.42,0:12:06.55,Default,,0000,0000,0000,,much power the engines produce and there\Nare two different one might call them Dialogue: 0,0:12:06.55,0:12:12.42,Default,,0000,0000,0000,,philosophies between the two major air\Nframers and Boeing and most others to use Dialogue: 0,0:12:12.42,0:12:19.32,Default,,0000,0000,0000,,back driven throttles so the computer sets\Nthe thrust and moves the thrust levers to Dialogue: 0,0:12:19.32,0:12:25.89,Default,,0000,0000,0000,,match the commanded thrust position and\NAirbus has a different system where the Dialogue: 0,0:12:25.89,0:12:29.41,Default,,0000,0000,0000,,thrust levers remain in one position\Nthroughout the entire flight basically Dialogue: 0,0:12:29.41,0:12:36.19,Default,,0000,0000,0000,,after take off when thrust is reduced\Nfor the main climb and cruise and descend Dialogue: 0,0:12:36.19,0:12:41.81,Default,,0000,0000,0000,,and everything they remain in one position\Nand the computer tells the engines Dialogue: 0,0:12:41.81,0:12:46.91,Default,,0000,0000,0000,,directly which thrust to produce. and\Nthere are there's an argument which one of Dialogue: 0,0:12:46.91,0:12:53.30,Default,,0000,0000,0000,,the systems is better but I'll show you\Naccidents three accidents in which the Dialogue: 0,0:12:53.30,0:13:00.91,Default,,0000,0000,0000,,thrust system the throttle system played a\Nrole. so the first one has a little video Dialogue: 0,0:13:03.61,0:13:07.40,Default,,0000,0000,0000,,you will see I think there are two\Ndifferent camera perspectives you will see Dialogue: 0,0:13:07.40,0:13:12.68,Default,,0000,0000,0000,,two airplanes landing of the same class\Nthey are small airliners two hundred Dialogue: 0,0:13:12.68,0:13:19.45,Default,,0000,0000,0000,,people something like that 150 to 200 now\Nlanding and the first one is a normal landing Dialogue: 0,0:13:22.61,0:13:25.40,Default,,0000,0000,0000,,so it's already pretty slow takes\Nits time Dialogue: 0,0:13:28.76,0:13:30.55,Default,,0000,0000,0000,,and the next one is the accident flight. Dialogue: 0,0:13:31.87,0:13:35.28,Default,,0000,0000,0000,,it's on the same day it's only\Nminutes apart so on the same Airport Dialogue: 0,0:13:36.63,0:13:40.84,Default,,0000,0000,0000,,and you can see that one is slowed down \Nand the one other one is still going very fast Dialogue: 0,0:13:45.96,0:13:47.20,Default,,0000,0000,0000,,so there's the first one Dialogue: 0,0:13:50.93,0:13:52.24,Default,,0000,0000,0000,,and that's the second one Dialogue: 0,0:13:52.24,0:13:58.61,Default,,0000,0000,0000,,and as you can imagine that didn't end well Dialogue: 0,0:13:59.35,0:14:03.16,Default,,0000,0000,0000,,it was one of the worst aviation \Naccidents maybe still Dialogue: 0,0:14:03.16,0:14:06.84,Default,,0000,0000,0000,,the worst today in Brazil where 200 people\Ndied Dialogue: 0,0:14:08.37,0:14:11.56,Default,,0000,0000,0000,,and as you can see this is a Dialogue: 0,0:14:11.56,0:14:16.57,Default,,0000,0000,0000,,transcript of of the flight data recorder\Nthe digital flight data recorder and the Dialogue: 0,0:14:16.57,0:14:23.60,Default,,0000,0000,0000,,first two lines are the interesting ones\Nthat says TLA that is thrust lever angle Dialogue: 0,0:14:23.60,0:14:27.38,Default,,0000,0000,0000,,and normally what happens on landing just\Nbefore touchdown the pilot pulls both Dialogue: 0,0:14:27.38,0:14:32.89,Default,,0000,0000,0000,,thrust wheels to idle now the engine\Nthrust goes down to to idle and then it Dialogue: 0,0:14:32.89,0:14:37.79,Default,,0000,0000,0000,,touches down engages reverse thrust\Nspoilers brakes everything to slow down Dialogue: 0,0:14:37.79,0:14:42.97,Default,,0000,0000,0000,,and what happened in this case is that the\Npilot only moved one of the thrust to idle Dialogue: 0,0:14:42.97,0:14:48.20,Default,,0000,0000,0000,,and left the other there put the one\Nthrust lever in reverse but not the other Dialogue: 0,0:14:48.20,0:14:54.22,Default,,0000,0000,0000,,and that led to the computer getting\Nconflicting information about whether the Dialogue: 0,0:14:54.22,0:14:58.97,Default,,0000,0000,0000,,pilots actually wanted to land or not so\Nit didn't deploy the automatic wheel Dialogue: 0,0:14:58.97,0:15:07.00,Default,,0000,0000,0000,,brakes it didn't deploy the spoilers and\Nreverse thrust only on one engine so that Dialogue: 0,0:15:07.00,0:15:14.83,Default,,0000,0000,0000,,went pretty badly and some people said\Nwell with tactile feedback from a thrust Dialogue: 0,0:15:14.83,0:15:19.03,Default,,0000,0000,0000,,levers if the pilots have been used to\Nthat they would have noticed earlier and Dialogue: 0,0:15:19.03,0:15:24.38,Default,,0000,0000,0000,,we can't really be sure because the pilots\Nalso died in the accident but there were Dialogue: 0,0:15:24.38,0:15:28.93,Default,,0000,0000,0000,,some people who made a case that moving\Nthrust levers would have been a lot better Dialogue: 0,0:15:28.93,0:15:29.87,Default,,0000,0000,0000,,in this case Dialogue: 0,0:15:31.31,0:15:33.33,Default,,0000,0000,0000,,so is that always better? Dialogue: 0,0:15:36.02,0:15:38.14,Default,,0000,0000,0000,,here's another throttle related accident Dialogue: 0,0:15:39.56,0:15:46.81,Default,,0000,0000,0000,,in this time it was a Boeing Boeing 737 at\NAmsterdam Schiphol Airport there was a Dialogue: 0,0:15:46.81,0:15:50.99,Default,,0000,0000,0000,,small technical malfunction would call\Nwhich caused the computers to think the Dialogue: 0,0:15:50.99,0:15:55.47,Default,,0000,0000,0000,,airplane was actually eight feet\Nunderground that was the reading that it Dialogue: 0,0:15:55.47,0:16:02.38,Default,,0000,0000,0000,,gave due to work through the way it works\Nand so said oh I'm below 30 feet I have to Dialogue: 0,0:16:02.38,0:16:06.06,Default,,0000,0000,0000,,reduce the thrust to idle and that's what\Nit did although it was still a couple Dialogue: 0,0:16:06.06,0:16:10.59,Default,,0000,0000,0000,,hundred feet high and the pilots didn't\Nnotice early enough and let the Dialogue: 0,0:16:10.59,0:16:18.06,Default,,0000,0000,0000,,speed decay and the wing stalled and\Ncrashed the airplane crashed and the nine Dialogue: 0,0:16:18.06,0:16:23.31,Default,,0000,0000,0000,,people died it was moderately only a\Nmoderately hard crash so most people Dialogue: 0,0:16:23.31,0:16:29.26,Default,,0000,0000,0000,,survived actually though it was still a\Nproblem and the way the auto in auto Dialogue: 0,0:16:29.26,0:16:34.64,Default,,0000,0000,0000,,throttle system works in this case if the\Nthrust levers had been static this Dialogue: 0,0:16:34.64,0:16:39.04,Default,,0000,0000,0000,,wouldn't have happened because the pilots\Nwere pushed the thrust levers above a Dialogue: 0,0:16:39.04,0:16:44.95,Default,,0000,0000,0000,,certain detent and it wouldn't have\Nreduced thrust automatically again so it's Dialogue: 0,0:16:44.95,0:16:52.26,Default,,0000,0000,0000,,very hard to say which system in total is\Nbetter you can count the accidents maybe Dialogue: 0,0:16:52.26,0:16:57.62,Default,,0000,0000,0000,,in which it played a roll but there are so\Nfew they're just really less than a Dialogue: 0,0:16:57.62,0:17:01.61,Default,,0000,0000,0000,,handful in each case so they're not\Nstatistically significant so you can't Dialogue: 0,0:17:01.61,0:17:06.78,Default,,0000,0000,0000,,really say by statistics alone which\Nsystem is better than the other they both Dialogue: 0,0:17:06.78,0:17:12.96,Default,,0000,0000,0000,,have their own problems and this is one of\Nthe decisions as engineers that you really Dialogue: 0,0:17:12.96,0:17:19.54,Default,,0000,0000,0000,,can't make a decisive argument for so one\Nmanufacturer chooses one and the other Dialogue: 0,0:17:19.54,0:17:24.78,Default,,0000,0000,0000,,chooses the other and there's another one\Nis asiana flight 214 at San Francisco many Dialogue: 0,0:17:24.78,0:17:32.02,Default,,0000,0000,0000,,of you may remember that. only three\Npeople were killed in this one because it Dialogue: 0,0:17:32.02,0:17:37.51,Default,,0000,0000,0000,,really burned out only after the crash\Nafter everyone had evacuated and so the Dialogue: 0,0:17:37.51,0:17:42.25,Default,,0000,0000,0000,,auto throttles didn't work as expected in\Nthis case the pilots thought oh the auto Dialogue: 0,0:17:42.25,0:17:46.22,Default,,0000,0000,0000,,throttles will hold the speed we don't\Nhave to worry about that as far as I Dialogue: 0,0:17:46.22,0:17:52.22,Default,,0000,0000,0000,,remember there were five pilots in the\Ncockpit and when finally someone noticed Dialogue: 0,0:17:52.22,0:17:56.55,Default,,0000,0000,0000,,and pushed the throttles forward it was\Nalready too late the engines take that Dialogue: 0,0:17:56.55,0:18:00.90,Default,,0000,0000,0000,,time to spool up the legal requirement is\Nthat they may take up to eight seconds to Dialogue: 0,0:18:00.90,0:18:07.89,Default,,0000,0000,0000,,spool up from idle to the necessary power\Nto go around and there wasn't enough time Dialogue: 0,0:18:07.89,0:18:11.54,Default,,0000,0000,0000,,for that because after the engines have\Nspooled up the airplane also still has to Dialogue: 0,0:18:11.54,0:18:16.80,Default,,0000,0000,0000,,accelerate to get back to flying speed\Nagain so in this case again the wings Dialogue: 0,0:18:16.80,0:18:23.76,Default,,0000,0000,0000,,stalled the airplane crashed just short of\Nthe runway and three people died. and the Dialogue: 0,0:18:23.76,0:18:28.09,Default,,0000,0000,0000,,third case was even one when nothing was\Nwrong with the airplane except you could Dialogue: 0,0:18:28.09,0:18:34.28,Default,,0000,0000,0000,,argue it was a design flaw but it was\Nworking as designed people who were going Dialogue: 0,0:18:34.28,0:18:38.71,Default,,0000,0000,0000,,to fly the aircraft learned how the system\Nworked learned everything about it Dialogue: 0,0:18:38.71,0:18:47.21,Default,,0000,0000,0000,,hopefully and so more training may perhaps\Nbe the answer that is one thing system Dialogue: 0,0:18:47.21,0:18:54.67,Default,,0000,0000,0000,,knowledge, two. crew resource management\Nhas been a big thing in previous decades Dialogue: 0,0:18:54.68,0:19:00.63,Default,,0000,0000,0000,,that the pilot command in command is not a\Ndictator on the airplane he has to listen Dialogue: 0,0:19:00.63,0:19:07.07,Default,,0000,0000,0000,,to the others to the other pilot even though\Nhe has ultimate authority in decision. Dialogue: 0,0:19:11.71,0:19:16.84,Default,,0000,0000,0000,,so do pilots always screw up if\Nthe automation fails? no luckily not if Dialogue: 0,0:19:16.84,0:19:22.30,Default,,0000,0000,0000,,other systems fail in this case not the\Nautomation really but there are two Dialogue: 0,0:19:22.30,0:19:26.09,Default,,0000,0000,0000,,cases which I would briefly mentioned\NChesley Sullenberger everybody knows about Dialogue: 0,0:19:26.09,0:19:33.10,Default,,0000,0000,0000,,him the movie has just been out the\Nditching in the Hudson superb pilot great Dialogue: 0,0:19:33.10,0:19:39.10,Default,,0000,0000,0000,,decision making to find the biggest flat\Nsurface in the area to pull it down and Dialogue: 0,0:19:39.10,0:19:48.41,Default,,0000,0000,0000,,Peter Burkhill he'll many other so who\Nknew about Peter Burkhill? A few. he was Dialogue: 0,0:19:48.41,0:19:53.00,Default,,0000,0000,0000,,the one saved about as many people as\NSullenberger when on approach to london Dialogue: 0,0:19:53.00,0:19:59.65,Default,,0000,0000,0000,,heathrow both engines lost thrust most of\Nthe thrust anyway and he managed to put it Dialogue: 0,0:19:59.65,0:20:04.34,Default,,0000,0000,0000,,down within the airport but short of the\Nrunway it was a crash landing the airplane Dialogue: 0,0:20:04.34,0:20:09.17,Default,,0000,0000,0000,,was destroyed but nobody died so it was a\Npretty good outcome. Dialogue: 0,0:20:14.41,0:20:16.84,Default,,0000,0000,0000,,so airplanes are one thing, \Nanother thing are cars Dialogue: 0,0:20:19.48,0:20:26.25,Default,,0000,0000,0000,,and anyone here has a\Nself-driving car? Or at least a Dialogue: 0,0:20:26.25,0:20:33.59,Default,,0000,0000,0000,,lane assist or something? Not many so not\Nmany people don't trust these newfangled Dialogue: 0,0:20:33.59,0:20:41.72,Default,,0000,0000,0000,,systems I guess. one of the big\Ndifferences is that pilots who are going Dialogue: 0,0:20:41.72,0:20:47.40,Default,,0000,0000,0000,,to fly highly automated aircraft have to\Ntake a long training course beyond their Dialogue: 0,0:20:47.40,0:20:54.20,Default,,0000,0000,0000,,pilot's license to learn the specifics of\Noperating this specific aircraft and Dialogue: 0,0:20:54.20,0:21:01.68,Default,,0000,0000,0000,,maintenance is very highly controlled and\Nregulated so that's another thing. and the Dialogue: 0,0:21:01.68,0:21:05.88,Default,,0000,0000,0000,,things for cars in general if something's\Nwrong with the engine you can just pull Dialogue: 0,0:21:05.88,0:21:13.21,Default,,0000,0000,0000,,over to the right and stop in most cases\Nand cars cannot just take off and take Dialogue: 0,0:21:13.21,0:21:18.22,Default,,0000,0000,0000,,evasive action in the third dimension and Dialogue: 0,0:21:18.22,0:21:22.27,Default,,0000,0000,0000,,there are lots and lots of obstacles\Non the ground there are trees Dialogue: 0,0:21:22.27,0:21:29.71,Default,,0000,0000,0000,,cars people houses everything whereas \Nthe air is mostly empty not entirely Dialogue: 0,0:21:30.05,0:21:38.18,Default,,0000,0000,0000,,air-to-air collisions happen midair collisions do\Nhappen but they are very very few. in the Dialogue: 0,0:21:38.18,0:21:45.76,Default,,0000,0000,0000,,automatic systems in the self-driving cars\Nor the autonomous cars that we have today Dialogue: 0,0:21:45.76,0:21:53.37,Default,,0000,0000,0000,,require constant monitoring and if the\Nsystems work too well then drivers may Dialogue: 0,0:21:53.37,0:21:58.44,Default,,0000,0000,0000,,actually forget about it and think they\Nare perfect and let their attention Dialogue: 0,0:21:58.44,0:22:07.08,Default,,0000,0000,0000,,wander. pilots sometimes are prone to do\Nthat as well but the thing is that in Dialogue: 0,0:22:07.08,0:22:13.90,Default,,0000,0000,0000,,Cruise in cruise flight if the automatics\Ndrop out the pilots have on the order of Dialogue: 0,0:22:13.90,0:22:20.34,Default,,0000,0000,0000,,minutes to react really at least several\Nseconds whereas on a road car if the Dialogue: 0,0:22:20.34,0:22:26.45,Default,,0000,0000,0000,,automatics drop out and you're in a curve\Nyou have fractions of a second to save the Dialogue: 0,0:22:26.45,0:22:29.39,Default,,0000,0000,0000,,car with the current state of the\Ntechnology. Dialogue: 0,0:22:35.87,0:22:41.16,Default,,0000,0000,0000,,some of you probably have heard about the trolley\Nproblem or trolley-ology as it's sometimes called. Dialogue: 0,0:22:44.89,0:22:49.28,Default,,0000,0000,0000,,it basically boils down to that a\Nfully autonomous car a highly Dialogue: 0,0:22:49.28,0:22:56.11,Default,,0000,0000,0000,,automated car may eventually have to make\Nthe decision between killing the occupants Dialogue: 0,0:22:56.11,0:23:03.74,Default,,0000,0000,0000,,and killing people on the road. and I\Nthink that is fundamentally an unsolvable Dialogue: 0,0:23:03.74,0:23:11.41,Default,,0000,0000,0000,,ethical problem that we cannot just leave\Nto the engineers or the car manufacturers Dialogue: 0,0:23:11.41,0:23:15.86,Default,,0000,0000,0000,,to decide that maybe the occupants are\Nalways more important than people on the Dialogue: 0,0:23:15.86,0:23:21.05,Default,,0000,0000,0000,,road? what if there's only one person in\Nthe car and there's a crowd on the road Dialogue: 0,0:23:21.05,0:23:24.71,Default,,0000,0000,0000,,and you have to decide between steering on\Nthe car into to the tree and killing the Dialogue: 0,0:23:24.71,0:23:33.08,Default,,0000,0000,0000,,sole occupant or killing several people\Nthat are in front of the car these are Dialogue: 0,0:23:33.08,0:23:42.76,Default,,0000,0000,0000,,situations that may actually happen. so I\Nreally can't see what the right answer is Dialogue: 0,0:23:42.76,0:23:49.06,Default,,0000,0000,0000,,to that if there is one and maybe there\Nisn't one. some engineers have actually Dialogue: 0,0:23:49.06,0:23:54.02,Default,,0000,0000,0000,,suggested that making a random decision in\Nthat case is the answer. I'm not too sure Dialogue: 0,0:23:54.02,0:24:02.15,Default,,0000,0000,0000,,about that either but whatever the\Ndecision the software takes at that moment Dialogue: 0,0:24:03.08,0:24:10.63,Default,,0000,0000,0000,,then people will die and they will take\Nthe blame either way and we don't know yet Dialogue: 0,0:24:10.63,0:24:13.12,Default,,0000,0000,0000,,how that's going to turn out in front of\Nthe courts. Dialogue: 0,0:24:17.99,0:24:20.20,Default,,0000,0000,0000,,so automation is hard to get Dialogue: 0,0:24:20.20,0:24:24.76,Default,,0000,0000,0000,,right and in some cases self-driving cars\Nit may be impossible to get it absolutely Dialogue: 0,0:24:24.76,0:24:33.25,Default,,0000,0000,0000,,right. which stage is the safest for the\Nsystems to be in and at what time who Dialogue: 0,0:24:33.25,0:24:41.35,Default,,0000,0000,0000,,knows it's very very hard to get it right\Neven in limited systems such as airplanes Dialogue: 0,0:24:41.35,0:24:47.34,Default,,0000,0000,0000,,and what to display to the operators and\Nwhen in many cases it would help the Dialogue: 0,0:24:47.34,0:24:55.03,Default,,0000,0000,0000,,pilots a lot when the automation drops out\Nto know intimate details of how the system Dialogue: 0,0:24:55.03,0:25:01.00,Default,,0000,0000,0000,,works internally. airbus has some logic\Ndiagrams in their pilots handbook but they Dialogue: 0,0:25:01.00,0:25:06.21,Default,,0000,0000,0000,,are labeled 'for info' which means they\Nare not required for any exams it's just Dialogue: 0,0:25:06.21,0:25:11.79,Default,,0000,0000,0000,,interesting to know but in case of the\Nlogic for extension of the ground spoilers Dialogue: 0,0:25:11.79,0:25:15.84,Default,,0000,0000,0000,,it's quite helpful to know which\Nconditions exactly have to be satisfied Dialogue: 0,0:25:15.84,0:25:17.38,Default,,0000,0000,0000,,for the ground spoilers to deploy. Dialogue: 0,0:25:21.40,0:25:24.40,Default,,0000,0000,0000,,but some of these problems I think cannot Dialogue: 0,0:25:24.40,0:25:31.36,Default,,0000,0000,0000,,be left to engineers and scientists alone\Nand we need psychologists and maybe Dialogue: 0,0:25:31.36,0:25:38.04,Default,,0000,0000,0000,,sociologists other people who know about\Nthe psyche of people who know about how Dialogue: 0,0:25:38.04,0:25:45.10,Default,,0000,0000,0000,,people think how people react how people\Nprocess information to make good Dialogue: 0,0:25:45.10,0:25:51.85,Default,,0000,0000,0000,,engineering design decisions to build\Nsafer systems. and as I said some of the Dialogue: 0,0:25:51.85,0:25:59.91,Default,,0000,0000,0000,,fundamental ethical problems may turn out\Nto remain unsolvable. Dialogue: 0,0:25:59.91,0:26:02.98,Default,,0000,0000,0000,,thank you I think we have a little bit of\Ntime for questions Dialogue: 0,0:26:02.98,0:26:12.34,Default,,0000,0000,0000,,[Applause] Dialogue: 0,0:26:12.35,0:26:14.70,Default,,0000,0000,0000,,MC: yes we actually do we have some time Dialogue: 0,0:26:14.70,0:26:19.20,Default,,0000,0000,0000,,for questions and we're gonna start with\Nthe internet if there are any questions no Dialogue: 0,0:26:19.20,0:26:21.45,Default,,0000,0000,0000,,there are not then it's microphone number\Nthree Dialogue: 0,0:26:21.45,0:26:27.47,Default,,0000,0000,0000,,Q: yes you mentioned the ethical problem\Nof the decision making the trolley problem Dialogue: 0,0:26:27.47,0:26:33.21,Default,,0000,0000,0000,,so whenever this comes up regarding\Nautomated driving systems whether it be Dialogue: 0,0:26:33.21,0:26:39.68,Default,,0000,0000,0000,,flight control or car driving I always get\Na little bit mad when philosophers come up Dialogue: 0,0:26:39.68,0:26:44.84,Default,,0000,0000,0000,,with that the there is one decisive\Ndecision you can make and that is the Dialogue: 0,0:26:44.84,0:26:50.68,Default,,0000,0000,0000,,whole thing should act predictably\Nespecially in road traffic the uttermost Dialogue: 0,0:26:50.68,0:26:58.16,Default,,0000,0000,0000,,importance is that all participants behave\Npredictably swerving out of lane is the Dialogue: 0,0:26:58.16,0:27:01.73,Default,,0000,0000,0000,,most dangerous thing you can do\NH: And what's your question? Dialogue: 0,0:27:01.73,0:27:08.21,Default,,0000,0000,0000,,Q: and if you have to make \Nthis decision people say you Dialogue: 0,0:27:08.21,0:27:13.00,Default,,0000,0000,0000,,have to make a decision then I say no\Nthere is a definitive safe state that is Dialogue: 0,0:27:13.00,0:27:20.80,Default,,0000,0000,0000,,drive with enough distance to the guy in\Nfront of you don't tailgate don't speed up Dialogue: 0,0:27:20.80,0:27:23.92,Default,,0000,0000,0000,,because if you're a regular driver\NMC: no no please ask your question Dialogue: 0,0:27:23.92,0:27:30.60,Default,,0000,0000,0000,,Q: okay question is why are people always\Nsaying it's ethically not decisive Dialogue: 0,0:27:30.60,0:27:34.79,Default,,0000,0000,0000,,decidable?\NBS: it isn't because if if just keeping Dialogue: 0,0:27:34.79,0:27:39.22,Default,,0000,0000,0000,,enough distance we solve all problems that\Nwould be that would be fine but cars are Dialogue: 0,0:27:39.22,0:27:44.95,Default,,0000,0000,0000,,not the only participants in traffic there\Nare people right and they can just jump in Dialogue: 0,0:27:44.95,0:27:51.48,Default,,0000,0000,0000,,front of a car. that is not predictable,\Nyeah you can you can require people to Dialogue: 0,0:27:51.48,0:27:54.90,Default,,0000,0000,0000,,behave predictable but good luck with\Nthat. Dialogue: 0,0:27:54.90,0:28:01.71,Default,,0000,0000,0000,,Q: I would like to counter that\N[Applause] Dialogue: 0,0:28:01.71,0:28:07.24,Default,,0000,0000,0000,,MC: okay I'm sorry there's not much room\Nfor discussion right now but microphone Dialogue: 0,0:28:07.24,0:28:15.26,Default,,0000,0000,0000,,number two please ask a concise question\NQ: okay let me try so you said about Dialogue: 0,0:28:15.26,0:28:19.74,Default,,0000,0000,0000,,automation in airplanes that whenever\Nthere is a small malfunction the autopilot Dialogue: 0,0:28:19.74,0:28:24.82,Default,,0000,0000,0000,,will disconnect and expect the pilots to\Nfix the situation right so it is my- Dialogue: 0,0:28:24.82,0:28:27.97,Default,,0000,0000,0000,,BS: yeah it's not not the smallest problem\Nbut some yeah Dialogue: 0,0:28:27.97,0:28:32.29,Default,,0000,0000,0000,,Q: okay so but it is my understanding that\Nthe pilots are still expected to follow Dialogue: 0,0:28:32.29,0:28:39.30,Default,,0000,0000,0000,,procedures and not make any random gut\Ndecisions in most cases. my question is do Dialogue: 0,0:28:39.30,0:28:44.62,Default,,0000,0000,0000,,you have statistics when the standard\Nprocedures were actually not applicable in Dialogue: 0,0:28:44.62,0:28:48.65,Default,,0000,0000,0000,,how many cases and in how many of these\Ncases did the pilots actually managed to Dialogue: 0,0:28:48.65,0:28:53.97,Default,,0000,0000,0000,,save the flight?\NBS: no I'm not aware of any statistics and Dialogue: 0,0:28:53.97,0:29:00.21,Default,,0000,0000,0000,,one of the problems with that is that in\Ngeneral the data recorder is only read Dialogue: 0,0:29:00.21,0:29:04.26,Default,,0000,0000,0000,,when there was an accident and it is\Nstrictly off-limits in all other Dialogue: 0,0:29:04.26,0:29:10.07,Default,,0000,0000,0000,,circumstances some airplanes have a quick\Naccess data recorder which they can Dialogue: 0,0:29:10.07,0:29:16.30,Default,,0000,0000,0000,,routinely read but only anonymized so and\NI don't think the airplanes published Dialogue: 0,0:29:16.30,0:29:21.42,Default,,0000,0000,0000,,statistics about that\NMC: okay last question microphone number Dialogue: 0,0:29:21.42,0:29:25.23,Default,,0000,0000,0000,,four please\NQ: yeah I'm just I just want to bring this Dialogue: 0,0:29:25.23,0:29:32.15,Default,,0000,0000,0000,,back to this sort of the IT security part\Nwhere what I find very good about about Dialogue: 0,0:29:32.15,0:29:37.97,Default,,0000,0000,0000,,the way accidents are handled in in\Naviation is that the report is completely Dialogue: 0,0:29:37.97,0:29:41.48,Default,,0000,0000,0000,,public so if you want to read you know the\NChallenger cut this show if you can you Dialogue: 0,0:29:41.48,0:29:44.65,Default,,0000,0000,0000,,can actually read all the technical\Ndetails and all that all the stuff that Dialogue: 0,0:29:44.65,0:29:53.66,Default,,0000,0000,0000,,happened and and all that information is\Nthere and the question is is why is this Dialogue: 0,0:29:53.66,0:29:58.02,Default,,0000,0000,0000,,not happening in the IT sector where\Nclearly millions of people are being Dialogue: 0,0:29:58.02,0:30:05.81,Default,,0000,0000,0000,,affected and somehow you haven't reached\Nthis stage where the the the data and the Dialogue: 0,0:30:05.81,0:30:10.53,Default,,0000,0000,0000,,analysis of the data is public so we can\Nall learn from it and get better as it has Dialogue: 0,0:30:10.53,0:30:14.63,Default,,0000,0000,0000,,been you know the way\NBS: I think the short answer is excuse me Dialogue: 0,0:30:14.63,0:30:17.35,Default,,0000,0000,0000,,Q: no it's good\NBS: I think the short answer is because Dialogue: 0,0:30:17.35,0:30:24.00,Default,,0000,0000,0000,,there is no legal requirement and if there\Nweren't for accident reports to be Dialogue: 0,0:30:24.00,0:30:26.82,Default,,0000,0000,0000,,distributed then many airlines wouldn't do\Nit . Dialogue: 0,0:30:26.82,0:30:31.41,Default,,0000,0000,0000,,Q: but why? It's very clear [???]\NBS: it's because it's embarrassing if you Dialogue: 0,0:30:31.41,0:30:34.38,Default,,0000,0000,0000,,have an accident it's basically the thing\NI think Dialogue: 0,0:30:34.38,0:30:36.84,Default,,0000,0000,0000,,MC: ok very last question microphone\Nnumber one please Dialogue: 0,0:30:36.84,0:30:42.97,Default,,0000,0000,0000,,Q: hey so one of the reasons we have\Nautomation in aircraft in the first place Dialogue: 0,0:30:42.97,0:30:47.27,Default,,0000,0000,0000,,is to reduce pilot workload where too high\Npilot workload is a major cause of Dialogue: 0,0:30:47.27,0:30:53.20,Default,,0000,0000,0000,,accidents it seems like one of the issues\Nwe're talking about here is that in a Dialogue: 0,0:30:53.20,0:30:57.13,Default,,0000,0000,0000,,situation where something's gone wrong the\Npresence of that automation are needed to Dialogue: 0,0:30:57.13,0:31:01.00,Default,,0000,0000,0000,,understand it means you've got a higher\Npilot workload in that situation the Dialogue: 0,0:31:01.00,0:31:06.57,Default,,0000,0000,0000,,question what is it doing now what's the\Nindustry sort of approach to that effect Dialogue: 0,0:31:06.57,0:31:13.28,Default,,0000,0000,0000,,and what do you think about that?\NBS: I think the traditional approach is to Dialogue: 0,0:31:13.28,0:31:18.23,Default,,0000,0000,0000,,just pile on more automation so then if\Nthat fails the pilot has an even higher Dialogue: 0,0:31:18.23,0:31:25.99,Default,,0000,0000,0000,,workload but the current thing is that\Nmanufacturers and the airlines go back Dialogue: 0,0:31:25.99,0:31:33.27,Default,,0000,0000,0000,,very very slowly to letting the pilot hand\Nfly more often and for a long time the the Dialogue: 0,0:31:33.27,0:31:38.75,Default,,0000,0000,0000,,mantra was use automation whenever\Npossible the highest level of automation Dialogue: 0,0:31:38.75,0:31:43.42,Default,,0000,0000,0000,,that is appropriate for the situation so\Nonly the takeoff and touchdown were flown Dialogue: 0,0:31:43.42,0:31:50.63,Default,,0000,0000,0000,,by hand and now it is very often use the\Nappropriate level of automation and that Dialogue: 0,0:31:50.63,0:31:55.87,Default,,0000,0000,0000,,means if there's not very high workload\Nand not a lot of traffic then hand fly the Dialogue: 0,0:31:55.87,0:32:06.41,Default,,0000,0000,0000,,approach for example. so to to keep in\Ngood practice and right to maintain Dialogue: 0,0:32:06.41,0:32:10.06,Default,,0000,0000,0000,,proficiency for all situations hopefully. Dialogue: 0,0:32:13.68,0:32:17.29,Default,,0000,0000,0000,,MC: thank you and please give a warm hand\Nof applause for Bernd Sieker. Dialogue: 0,0:32:17.30,0:32:21.98,Default,,0000,0000,0000,,[Applause] Dialogue: 0,0:32:21.98,0:32:26.66,Default,,0000,0000,0000,,[Music] Dialogue: 0,0:32:26.66,0:32:46.00,Default,,0000,0000,0000,,subtitles created by c3subtitles.de\Nin the year 2018. Join, and help us!